Foxy — Privacy Policy

Last updated: August 23, 2026

Foxy is made by MindRise Studio. This policy covers the Foxy app for iPhone and iPad and the Foxy pages on mindrise.studio. It explains, in plain language, what we do with your data.

Your photos and drawings

On your phone

Foxy's built-in preparation modes — AI Sketch, Clean Outline, Portrait, Shading Guide, Craft Stencil, and background removal — run entirely on your device using Apple's on-device frameworks and a bundled model. So do the camera and screen tracing workspaces, time-lapse recording, and the finished drawing comparisons. Nothing from these features is sent to us. Your projects live in the app's private storage on your device, and sharing a drawing uses the standard iOS share sheet, which only sends what you choose to share.

When you use an AI feature

Three features use servers, because the models are too large to run on a phone. Each one is clearly labelled "AI" in the app, and you choose when to use it.

• Convert with AI (photo → drawing): the photo you pick is resized and uploaded to our private cloud storage, under a path that only your account can reach, and passed to our AI provider to produce the drawing. If you adjust the result, the stored upload is reused so you don't upload the photo again. Uploaded photos are deleted automatically 30 days after upload. The generated drawing is saved on your device and a copy stays in your account's storage until you delete your account or ask us to remove it.
• Create with AI and Magic (in Trace Text): the words you type are sent to our servers, checked by a language model that declines unsafe requests (for example sexual content, real people, or trademarked characters), and then passed to the image model. Your prompt text is not written to our logs; a declined request is recorded only as a category and a one-way hash.

Our AI provider is fal.ai, which processes photos and prompts on our behalf to return the result. We keep a record of each AI session (when it happened, which feature and style, and where the files are) and your credit balance. We do not use your photos or prompts to train AI models, for advertising, or for anything other than making your drawing. Only upload photos you own or have permission to use.

Your account

When you first open Foxy, the app creates an anonymous account — a random identifier with no name or email — so that your AI credits and subscription can work. Signing in with Apple or Google is optional. If you do sign in, we store your account identifier and email address to link your subscription across devices and to recognise a purchase made on our website. We do not use your email for marketing without your consent.

What else the app collects

To understand how Foxy is used and to measure our advertising, the app collects usage and diagnostic data. None of it includes your photos, drawings, or prompts.

• Usage events (for example "onboarding completed", "project created") through Amplitude and Firebase Analytics.
• Attribution data — which ad or link brought you to the app — through AppsFlyer, including your device's advertising identifier only if you allow tracking.
• Crash reports through Firebase Crashlytics — the device model, OS version, and what the app was doing when it crashed, linked to your anonymous account identifier so we can tell one affected user from many. Never your photos or drawings.
• Purchase events through RevenueCat and Apple, so your subscription works and can be restored.
• Push notification tokens, if you turn notifications on. You can turn them off anytime in Settings or in iOS Settings.
• Device attestation — a token from Apple's App Attest that proves requests come from the genuine Foxy app. It contains no personal information.

Tracking permission

During setup, the app asks for iOS tracking permission (App Tracking Transparency). If you choose "Ask App Not to Track", the app does not use your device's advertising identifier, and attribution falls back to aggregate, privacy-preserving methods. Tracking never involves your drawings or photos, and the app works identically either way.

Subscriptions and payments

In the app, purchases are processed by Apple. We never see your payment details; manage or cancel in your Apple Account settings. On our website, payments are processed by Stripe, which handles your card details; we receive your email address and the subscription's status. RevenueCat links the subscription to your account so it works on every device you sign in on.

Our website

The Foxy pages on mindrise.studio use these tools:

• Advertising pixels from Meta and TikTok, which set cookies and report page views and purchases so we can measure our ads. Our server also sends these platforms conversion events that include a hashed (one-way) version of your email or our random visitor id and, as the platforms require, your IP address and browser information.
• Amplitude for product analytics, including session replay of how the page is used. Anything you type is masked; payment fields are never captured.
• The email you enter before checkout, stored together with a random visitor id and the campaign parameters from the link you arrived on, for up to 90 days, so we can send you your plan and recover an unfinished purchase.
• First-party event logging of funnel steps with your country (derived from your IP address) and campaign parameters.

Children

Foxy shows no third-party ads and contains only original artwork. It is rated 9+ and is not directed at children under 13; the account, AI, and purchase features are intended for adults. If a parent believes a child has provided personal information, contact us and we will delete it.

Retention and deletion

• Uploaded photos: deleted automatically 30 days after upload.
• Generated drawings, AI session records, credits, and account details: kept until you delete your account.
• Website leads: 90 days.
• Analytics and attribution data: retained by the services above; we keep it in aggregate form.

Delete Account in Settings → Account removes your account record, AI sessions and credits, every uploaded photo and generated drawing in our storage, and your sign-in. It cannot be undone. If you never signed in, or want anything else removed, email us from the device or address in question and we will take care of it.

Where your data is processed

Our servers and storage run on Google Cloud in the United States, and our AI provider processes requests in the United States. The analytics, attribution, subscription, and advertising services named above process data under their own privacy policies, which may involve other countries. By using Foxy you agree to this processing.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your data, and to object to or restrict certain processing. Email us and we will honor these requests. We do not sell your data.

Contact

[email protected]

Changes

If this policy changes materially, the app will tell you before the change applies. The date at the top shows the latest revision.